Cybercriminals Hack Brazilian Government Servers to Host Phishing Sites

Attackers are turning trusted government and education domains into infrastructure for their own campaigns, using compromised Brazilian servers as reverse proxies for gambling-themed phishing pages. Because .gov and .edu domains carry inherent credibility and often bypass filters, this tactic makes scams far harder for users and security tools to spot. It also underscores how weakly maintained public-sector web servers become a liability for everyone.

• A Chinese-language cybercrime group is compromising Brazilian government and education websites to host phishing and gambling-themed pages.
• The attackers build a reverse-proxy network, borrowing the trust and reputation of legitimate domains to evade filtering.
• Public-sector web infrastructure is a soft target whose compromise puts ordinary internet users at risk.